Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File:                     bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier:          AJLg090E9eSIRCbjs4Vn1e9xp5tTrvLUTBuQrn2+psU=
Subject key identifier:   EE:EF:2F:D0:50:F8:D6:8B:53:9C:B3:B7:6D:FA:D5:DD:FF:DC:6C:D2
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer:       /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial:       0194BCE084ADBB56906AA95696D7160AABD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number:          051B
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
                          2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: StsHJakpVieqBB0NEVAlv0IdUZLj8WCNERoBO6+f9pQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:84:ad:bb:56:90:6a:a9:56:96:d7:16:0a:ab:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=eeef2fd050f8d68b539cb3b76dfad5ddffdc6cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3a:f0:c7:72:0e:98:84:dc:52:51:1d:dc:3e:
                    ce:8c:d8:68:0f:ec:fc:40:b1:ba:83:a9:fa:ad:24:
                    45:78:ae:60:e6:c7:1a:8d:0e:c6:74:11:f3:ad:4e:
                    48:50:50:76:0d:ee:f8:84:90:94:3b:c9:67:3d:5a:
                    71:94:c3:f7:67:c0:7e:59:38:4d:48:fe:68:76:df:
                    90:f5:ef:c2:7d:b3:51:42:60:20:43:03:87:67:e6:
                    17:47:d5:30:b8:f5:96:6c:1c:b8:de:33:cb:79:df:
                    5a:ac:f5:61:53:50:81:ad:de:b3:d3:9b:ef:98:49:
                    89:5a:18:5e:6b:1b:db:ce:5a:c3:3c:fe:71:ea:54:
                    c3:a5:4d:55:23:c4:a6:7e:f0:2b:2f:16:2f:82:12:
                    bf:e2:7a:6f:5b:7d:06:e8:dd:5f:55:f1:2b:ee:9c:
                    d8:cb:06:b2:ee:08:b2:f0:c5:ed:ca:00:d8:58:91:
                    e2:b9:d2:58:56:a5:91:b8:7a:3c:fb:94:c6:9d:3b:
                    c6:e4:39:13:0c:6a:a9:67:be:91:64:52:5a:23:80:
                    bb:6e:e0:fb:2c:8b:1d:a2:52:58:6d:f0:ba:76:9f:
                    c0:dc:32:0a:a6:cb:7e:c2:a5:23:33:6c:70:d3:a3:
                    e2:07:38:42:84:39:ba:6c:8e:bf:35:27:67:b0:31:
                    21:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:EF:2F:D0:50:F8:D6:8B:53:9C:B3:B7:6D:FA:D5:DD:FF:DC:6C:D2
            X509v3 Authority Key Identifier:
                keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8a:6d:99:1d:9e:a5:a9:cd:ef:2c:17:49:3d:fa:2f:8a:a9:
         12:f9:37:ab:be:ae:6b:67:aa:b7:45:67:6e:4c:e8:30:73:56:
         5c:b2:cd:0f:53:b8:fa:a0:e6:ce:03:13:1b:4b:ef:3d:4f:be:
         c0:04:81:17:e7:e6:2b:4f:23:74:82:e2:2f:b8:e0:1f:59:bf:
         62:af:42:27:03:83:80:18:a9:b7:8b:5b:04:7f:9b:77:bd:8c:
         c4:d7:08:86:af:b8:23:5a:4a:18:b1:6a:1a:c6:b9:1c:3a:b1:
         38:e0:1f:1e:ea:1f:03:3e:7a:7b:78:30:66:b8:3e:cc:da:ce:
         05:55:6f:ee:4e:50:67:07:9d:3e:c9:d1:20:49:56:44:e4:15:
         9e:37:80:5e:fe:8c:ee:af:34:64:96:07:af:81:10:98:8e:e4:
         24:42:bc:50:cf:b4:08:b8:46:c6:58:a1:48:a3:07:b3:9b:6f:
         4f:6b:56:59:10:e3:fe:30:0d:32:92:33:69:34:e5:3d:21:90:
         8a:73:06:d3:1f:e5:39:2d:e3:b4:e8:f2:07:df:9a:90:92:4e:
         46:73:7b:b6:d4:8f:46:56:3f:4f:e0:d0:bd:88:19:79:96:de:
         76:c3:69:34:94:b2:3d:93:5a:84:1f:19:5a:ec:94:88:53:b9:
         e7:09:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:48:21 2025 by rpki-client